Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: Dwe900jpe9asQijI+Uy39Gz/mIeEcmP+SIXu23K7kNA=
Subject key identifier: FA:F9:7B:A3:A3:2A:7F:2D:97:DA:A5:2E:22:A8:57:17:06:5C:A1:79
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 01992255839EB22122BE2DABB47F0F1A5BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=)
2: Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa (hash: TLo7HXxLeEPCaG6doyM8ItbshKpgy+E58r0ur/ZFDhw=)
3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: Lfw2uHVsOfv6GFTi4PRdLute9s7oRO7XaD9dRLffa4w=)
4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:83:9e:b2:21:22:be:2d:ab:b4:7f:0f:1a:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=faf97ba3a32a7f2d97daa52e22a85717065ca179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:2c:fd:13:7b:db:86:18:d7:f3:7d:1a:df:
ea:11:c1:e9:10:1c:8b:34:23:fa:9b:ae:b0:d0:68:
1c:9e:68:aa:b6:b3:70:d9:b7:61:29:2e:ad:9a:eb:
7e:88:ae:0b:19:58:e1:61:dd:0e:86:64:42:c4:1c:
2e:46:c3:c7:8f:78:ba:cb:5d:df:e1:8f:ac:a6:79:
e5:0a:20:1f:78:23:8f:24:38:57:be:c3:8b:b4:cc:
31:62:fa:bc:e5:5d:aa:16:32:d9:ae:66:59:0f:11:
62:de:17:00:b2:99:ed:9d:b0:d2:07:a8:d5:f8:26:
6f:25:f1:ba:b1:28:8b:91:8f:da:83:6c:dd:e7:95:
44:0d:87:90:59:7d:7d:94:46:92:e7:78:6b:45:bb:
19:cf:8e:bf:b6:6f:d7:4e:d1:8c:31:20:24:c8:ef:
48:9c:63:a6:35:e5:24:c9:0b:d6:6c:2d:2d:03:58:
ea:bf:f7:8f:a1:c2:88:84:4d:d2:6b:80:33:07:22:
c2:3d:93:20:da:45:e7:b9:07:15:04:78:b1:e7:47:
9e:42:67:5b:f9:01:cb:8f:e3:5e:b8:1e:d9:1a:43:
1e:67:66:0d:71:7a:e0:19:e8:b2:35:22:2d:8c:b5:
e2:4f:9a:fe:c7:6c:ae:d1:c3:22:b5:58:af:50:2f:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:7B:A3:A3:2A:7F:2D:97:DA:A5:2E:22:A8:57:17:06:5C:A1:79
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b9:21:b1:64:9a:87:d8:cd:b2:70:30:a1:0c:59:17:f0:4d:
86:45:bd:6f:12:52:70:a6:1d:41:6d:2b:9f:61:51:94:5d:7d:
df:06:a9:bf:4c:34:7b:89:8b:94:ee:f9:b5:9e:f9:2e:b8:3c:
8d:83:be:e6:8e:c8:91:af:78:9f:74:f0:f5:ef:a5:78:61:b2:
8f:73:25:a0:01:54:7b:f4:3e:7f:96:ea:9a:19:46:30:3d:d3:
20:86:19:31:40:76:b6:fa:75:73:63:96:81:14:5e:db:3a:5e:
42:52:d7:a1:48:94:84:e1:b2:95:0a:eb:5e:4f:5b:2c:f3:29:
12:ec:d5:3c:31:fd:7d:52:9d:0a:d0:7c:1c:7a:35:b4:6d:65:
6d:30:43:c8:38:59:53:ba:61:d9:db:09:41:cc:67:62:cd:e7:
ef:d1:3b:8d:75:8d:54:af:59:1c:03:f4:c1:31:e4:23:7b:0f:
7d:a7:7b:c3:69:80:4d:4a:a1:fb:a6:1d:54:f1:20:e8:30:60:
72:48:41:f9:62:c3:49:41:52:8c:a0:78:90:32:e8:13:8e:32:
52:20:59:e5:1a:6b:90:5a:e7:85:ee:79:b2:c3:cd:e6:2f:b7:
09:70:92:fd:75:31:0c:ef:ca:09:34:74:4a:d2:74:12:9f:93:
df:aa:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:28 2025 by rpki-client